Optimized quantum random-walk search algorithms on the hypercube 
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Shenvi, Kempe and Whaley's quantum random-walk search (SKW) algorithm [Phys. Rev. A 
67, 052307 (2003)] is known to require 0(a//V) number of oracle queries to find the marked ele- 
ment, where N is the size of the search space. The overall time complexity of the SKW algorithm 
differs from the best achievable on a quantum computer only by a constant factor. We present 
improvements to the SKW algorithm which yield significant increase in success probability, and an 
improvement on query complexity such that the theoretical limit of a search algorithm succeeding 
with probability close to one is reached. We point out which improvement can be applied if there 
is more than one marked element to find. 



I. INTRODUCTION 

In the pioneering paper [ij Shenvi, Kempe and Whaley 
demonstrated that a useful quantum algorithm can be de- 
signed based on quantum random-walks. This quantum 
random-walk search algorithm (the SKW algorithm) can 
be used to find a vertex of a hypercube that is marked 
by an oracle. Although the number of oracle calls needed 
by the SKW algorithm scales with the size of the search 
space similarly to the Grover search 0], its principle of 
operation is significantly different. Since the pioneering 
work a variety of quantum algorithms have been pro- 
posed utilizing quantum random-walks, see for example 
H, 13 • The SKW algorithm may be divided into a quan- 
tum part, and a simple classical protocol in which the 
former is embedded. The quantum part is a perturbed 
Grover walk on a hypercube started from an equally 
weighted superposition of initial states and iterated for 
a given number of steps, to be followed by a measure- 
ment on the output state to find the marked vertex. 
The perturbation of the Grover coin is derived from the 
oracle, which is used to introduce position dependence 
into the coin operator. In this paper, we shall use the 
term SKW quantum random-walk to refer to this spe- 
cial quantum random- walk. As it has been shown in [l| 
the SKW quantum random-walk yields the marked ver- 
tex with probability strictly less than 1/2, therefore it 
is necessary to embed it into a classical protocol to find 
the marked vertex with certainty, or use an amplitude 
amplification scheme [H, Q . The classical protocol of the 
SKW algorithm is relatively simple: a measurement is 
made on the final state of the SKW quantum random- 
walk, then its result is verified by querying the oracle 
directly. By repeating the algorithm and these two steps 
a sufficient number of times, we can make sure that the 
marked element is found with an arbitrary small failure 
probability. Applying an amplitude amplification scheme 
would provide a more efficient way for increasing success 
probability, however, its use would mean departure from 
the quantum random walk paradigm. 

The overhead caused by repeating the quantum 



random-walk several times, although contributing only a 
constant factor to the time complexity, can be a consid- 
erable source of difficulties in certain experimental sce- 
narios. In the present paper we present modifications 
to the SKW algorithm which allow significant reduction 
of the number of necessary repetitions. We note that 
in 2 dimensions the spatial search algorithm by Ambai- 
nis, Kempe and Rivosh 0] also yields the target vertex 
after one run with probability less than one, i.e. with 
only 6(1/Vln A^). Recently, Tulsi Q has proposed im- 
provements to this algorithm, which allow the finding of 
the target vertex with probability 1 after one run. The 
speedup in has been achieved by introducing an an- 
cilla qubit into the computational space, which is similar 
in spirit to our improvement modification described in 
Sec. mil which uses an additional coin dimension. Im- 
provements of quantum walk-based searches have been 
studied also by other authors. In an optimization 
dedicated to the scattering random- walk implementation 
[13, EH, Ell been proposed, related to the findings we 
describe in section HIl In [l3| the authors discussed the 
optimization of the quantum walk on a line by varying 
the coin operator parameters. 

In Section |TT] we prove that the final state of the SKW 
quantum walk consists mainly of the target vertex and 
its next neighbours, and present modifications to the al- 
gorithm which exploit this property. These modifications 
can be used to reduce the number of repetitions of the 
SKW quantum walk, and to reduce the number of inde- 
pendent verification queries to the oracle. We note that 
the task of verification may be problematic for certain 
implementations, e.g. in a spatial search implementation 
where a vertex being marked is a local property and not 
a property given by an oracle. Such additional costs have 
been considered in Ref. [lij in connection with quantum 
walks. 

Based on the SKW algorithm we develop an algorithm 
in Section [ni] that displays query complexity 1/V2 of 
the original, thus the theoretically lowest for a search al- 
gorithm with a success probability close to 1 [lB|- Our 
improvement is founded on the bipartite nature of the 
SKW quantum random- walk, and we arrive at its final 
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form after several steps. We note that some of these inter- 
mediate steps may be useful improvements on their own 
right, depending on the actual physical implementation. 

In Section IIVI we outline the conditions under which 
the optimizations introduced in Section IIIII can be used 
to find multiple marked vertices. Finally, in section IVl we 
conclude our results. 



II. IMPROVING SUCCESS PROBABILITY BY 
CONSIDERING NEXT NEIGHBOURS 

In this section we describe a property of the SKW 
quantum walk that can be used to boost the probabil- 
ity of finding the marked vertex by doing a proper mea- 
surement on its final state. Let C„ = (V^,£'„) denote 
the graph of the n dimensional hypercubc. The argu- 
mentation of the present paper relies heavily on the con- 
cept of the Hamming weight and the parity of an integer, 
which can be easily related to each other. The Hamming 
weight of an integer is the number of Is in its binary 
string representation x, and shall be denoted by |^| in 
this paper. The parity of x is then simply \x\ mod 2. A 
related concept is the Hamming distance of two integers, 
say x and y, that is defined as |a?© y|, where © denotes 
the bitwise addition modulo 2 operator. Following the 
notation of earlier work [l|, [l^, the vertices Vn of the 
hypercube are labelled by integers x = 0, . . . , 2" — f in 
such a way that the Hamming distance between any two 
vertices connected by an edge is exactly 1. The SKW 
quantum walk takes place on the product Hilbert space 
-^c„ ^-^i/„ where H^" is the = 2" dimensional Hilbert 
space representing the vertices, and H^" is the n di- 
mensional space associated with the quantum coin. The 
propagator of the SKW quantum walk can therefore be 
written as 

S = Y,\d^x®ed){d,x\, (1) 

where — 2'^ correspond to the edges originating from 
the given vertex. If the target vertex marked by the 
oracle O is denoted by xtg, the perturbed coin operator 
can be written as 

C ^ Co t + {Ci - Co) ® \xtg){xtg\- (2) 

For the SKW quantum walk, Co is usually chosen to be 
the n dimensional Grover operator (also known as the 
Grover diffusion operator) and Ci is chosen to be — 1. 
The results in this section, however, hold for any pair 
of inequivalent permutation invariant unitary coins. As 
it has been argued in due to the symmetry of the 
hypercube graph the vertices can always be re-labelled 
in such a way that the marked vertex becomes Xtg = 0. 
Since with this choice the permutation invariance of the 
Grover walk on the hypercube is conserved, the initial 
state 

1 " 



allows the reduction to a walk on a line. The basis states 
for this collapsed quantum walk are defined as 

V ^^x) \s\=xxa = l 

and the propagator becomes 

n-l 

5 = ^ x){L, x + l\ + \L,x + x\. (6) 

x=0 

The coin operator of the walk on the line acquires a 
strong position dependence. For example when Co is the 
Grover coin, in the collapsed basis it becomes 

„ / cosw^r sinwj. \ ,1,1 /_N 

^o-E( sine. -cose. j^l-X^I' 

x=0 ^ ' 

where cosuJx — \ ~ 2x/n and sinijjx = {2 / n) x{n — x), 
and the matrix is understood in the basis. The 

perturbed coin with Ci ~ —TL can be written as 

C = Co-2\R,0){R,0\. (8) 

It has been shown in [l| that after an optimal number 
of iterations the probability po of obtaining the target 
state |0) in a measurement is close to 1/2, and that the 
optimal number of iterations is well estimated by the 
nearest integer to 

if = (7r/2)V2"-i. (9) 

This means that the final state is composed mainly of 
the target state, and contains smaller contributions from 
its next and more distant neighbours However, this 
statement can be refined by partitioning the SKW quan- 
tum walk into two independent quantum walks. Let Tie 
denote the subspace spanned by states \d,x) such that 
\x\ is even, and Tio denote the subspace spanned by the 
states with \x\ being odd. The terms even and odd re- 
fer to a labelling where the target vertex is denoted by 
Xtg = 0, therefore, in general, these subspaces must be 
defined according to the parity of x(3xtg- The two quan- 
tum walks are started in the Hilbert spaces Tie and Ti.o, 
and evolve independently. In the following we shall term 
Tie the even subspace, and Tio the odd subspace of Ti.. 
It follows from the property of the parity function that 
this partitioning of Ti. is the same for all values of xtg, 
however, the role of the two subspaces depends on the 
parity of Xtg- We can define the orthogonal projectors Pe 
and Po that project to He and Tio, respectively. Clearly, 
in the collapsed basis, the even subspace is spanned by 
the states (j?]) and (O with x being even, and the odd 
subspace is spanned by those with x being odd. Since 
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[Pe/o, Co] = and [Pe/o, C] = it follows from the defi- 
nition of S that 



PoU' = U'Pe, 

PeU' = U'Po. 

Let us introduce the (normalized) states 

= V2Pe|V^0), 



(10a) 
(10b) 



(11) 
(12) 



and express the initial state as |V'o) = ^l^'o'^^'* ^ iV'o"''))- 

It can easily be seen that the action of U' on |'0o°'') sim- 
plifies to 



f/'l4°))=[/|4°)) = |v4'^)). 



(13) 



By successive applications of Eqs. ([T0| and (|T3|) it can be 
shown that U' has the property 

Pe{UT\^^) = P. ([/')"■+ Vo), (r = 0,1, 2,.. (4,4a) 
Po{UT\i^o) = Po{UT-'\^^), (r = 1,2, 3,.. (44b) 

Let us express the state of the walker after t steps as 

n— 1 n 
a:— x—1 

and define = ja^ + l^^^^rP' '^^^^ setting „ = 
Q = for convenience. The interpretation of P^ is 
clear from the definitions: Pg is the probability of having 
the walker at the target vertex after t iterations, and Pf 
is the total probability of finding the walker at any of the 
nearest neighbours of the target node. Using the above 
bipartition of the quantum walk it can be shown that the 
inequalities 



P*+i < Pi 

pi— 1 ^ rtt 
^0 — ^1 



(16a) 
(16b) 



hold for alH > 0. From which it follows that the proba- 
bilities 



Po 



d=0 



d,\x\=l 



satisfy the inequality 



Pi > Pa 



(17) 
(18) 

(19) 



For the details of the calculations see Appendix lAl This 
property is illustrated in Fig. [T] using a numerical simu- 
lation. 



probability 
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FIG. 1: The plot shows the numerically calculated probability 
distribution for the position of the walker after the optimal 
number of iterations of the SKW quantum walk in n = 5 di- 
mensions. In accordance with the analytic results, the prob- 
ability distribution has its maximum for the marked vertex 
xtg = reaching a value close to 1/2. Moreover, we observe 
that the nearest neighbours are also presented with high prob- 
ability, and the sum of these probabilities is comparable to 
that of the marked vertex. 



Therefore, since we have po = 1/2 — 0(l/n), the total 
probability of measuring the target node or any of its 
direct neighbours is 



Pc= Pa+Pi>l - 0(l/n). 



(20) 



Since Pc is upper bounded by 1, for large n the total 
probability must be approaching pc ^ 1. Naturally, the 
question arises: can Eq. (|20p be turned to our advan- 
tage? In the following we shall address this question, 
and answer positively. 

First, let us analyze the most straight-forward way of 
taking advantage of Eq. (pO)) . According to the SKW pro- 
tocol, the validity of the measurement outcome after 
t{ iterations is verified using the oracle. If the verification 
is positive the target node is found, otherwise the result is 
discarded and the SKW quantum walk is repeated. How- 
ever, this is unnecessary since from Eq. (|20p we know that 
in case of a negative answer from the oracle, the proba- 
bility that z,„ is a direct neighbour of Xtg is greater than 
1 — 0(l/n). Therefore, it is sufficient to query the ora- 
cle with values from the set {Xm © | d = 0, . . . , n — 1}, 
from which the marked element can be extracted using 
the simplest classical protocol by an average of (log2 A^)/2 
additional oracle queries. 

In a scenario where the verification costs are dominat- 
ing over all other cost it is crucial to perform the mini- 
mum number of necessary verification queries. One possi- 
bility could be to use amplitude amplification or another 
quantum based search, however, both these approaches 
mean a departure from the original hypercube quantum 
random-walk. 

In the following, we propose an alternative approach to 
reduce the number of verification queries if the coin states 
can also be determined. Let us set tf^o = 2[tf/2j -|- 1, 
and denote the outcome of the measurement on the coin 
state by d„^. Using the notations of (fT5|) . we can re- 
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write Eq. (|14ap for the case j = 0, and obtain |a^Q^p = 
|a^gp = 1/2 — 0(l/n). From the unitarity of the coins, 
and the definition ([6]) of S" it foUows that we also have 

\^li\' = \c^%o\'^l-Oil/n). (21) 

Note, that this ensures also that he have = 0{l/n), 
which is negligible for large n. Therefore, we conclude 
that the final state is composed mainly of the states \R, 0) 

and |L, 1) = l/%AiX]d=o Ml ^t^)- Thus, if the measure- 
ment gives Xm 7^ xtg then the target vertex can be found 
with 1 — 0(l/n) probability by taking xtg = © ed„- 

In other words, if a complete measurement can be 
made on the coin state, the marked element can be deter- 
mined with 1 — 0(l/n) probability after a single execution 
of the SKW algorithm and one verification query to the 
oracle. 



III. MODIFICATION TO ATTAIN OPTIMAL 
QUERY COMPLEXITY 

In the present section, based on the SKW algorithm 
we develop a search algorithm which finds the marked 
vertex of a hypcrcubc using the optimal number of ora- 
cle queries. In contrast to the modifications of HIl which 
essentially affect only the classical processing part, the 
improvement proposed in the present section requires a 
modification of the quantum walk itself. 

The improvement is based on the bipartite nature of 
the SKW quantum walk, which implies the invariancc of 
the even and odd subspaces under two iterations of [/', 

[Po,C/'2l-[Pe,C/"1-0, (r-0,1,...), (22) 

which follows from Eqs. (fTO|) . First, consider the projec- 
tion of the state of the walker after 2r iterations onto the 
even subspace. In the spirit of Eq. (|22p we can see that 
the projection of the final state corresponds to a similar 
projection of the initial state, which we can write as 

f/'^nV^^^) = x/2PeC/''''|^o). (23) 

Introducing tf,e = 2[tf/2j we conclude that for the prob- 
ability Pq to find the marked node after tf^e itera- 
tions starting from the even initial state \'ipo^^) the rela- 
tion 

pWt/,e ^ 2P*f'^ = 1 - 0(l/n) (24) 

holds. This is an encouraging result, since it suggests 
that the marked element can be directly found with high 
probability after a single execution of the SKW algorithm 
without any verification queries. However, the choice 
Xtg = is actually the result of the mapping x —f xQxtg, 
thus we do not know in general which is the even sub- 
space and which is the odd subspace. 



The information about the parity of the marked vertex 
is clearly contained in the oracle. An efficient way of 
extracting this information is to repeat the quantum walk 
twice, once starting from the initial state IV'o^'') a-nd once 
starting from |V'o°^)- Note, that it is not necessary to 
know which one is which, since IV'o'^'') will yield |xtg) with 
nearly unit probability. Therefore, the target vertex can 
be identified by testing the two measurement outcomes 
Xm' and Xm'' on the oracle. 

Instead of repeating the algorithm twice, it is possi- 
ble to construct another SKW quantum walk in which it 
is guaranteed that the marked element corresponds to a 
vertex with even parity. The principle of this modifica- 
tion is the mapping of all the vertices of the n dimensional 
hypercube to the even parity vertices of an n' = n -I- 1 
dimensional hypercube. Since the number of even and 
odd vertices is equal for a hypercube in every dimension, 
the mapping between the original vertices and the even 
parity vertices of the larger hypercube can be made one- 
to-one. 

In the following, we assume that the oracle is given as 
an operator acting on the Hilbcrt space H^" associated 
to the n dimensional hypercube, and we shall construct 
an SKW quantum walk in n' = n + 1 dimensions using 
the extended oracle acting on the Hilbert space H^"' . 
The vertices x of the original hypercube are mapped to 
the even parity sites of the extended hypercube by the 
map 

x' = m(x) = 2x + p(x), (25) 

where p(x) denotes the parity of x. This mapping can be 
viewed as appending one bit to the bit string represen- 
tation of the original vertex, the value of the bit being 
1 for odd parity vertices, and for even parity vertices. 
The reverse mapping simply drops the appended bit for 
even parity input, while the odd parity vertices of the 
extended hypercube do not correspond to any vertices of 
the original graph. 

In this way the marked vertex is known to be mapped 
to an even parity vertex on the extended hypercube. The 
modification of the oracle O to return positive result only 
for the new marked vertex is straight forward. Let the 
operators of the n' dimensional extended SKW quantum 
walk be distinguished from the original n dimensional one 
by adding a (-I-) superscript. Therefore, the coin opera- 
tors acting on Ti^^' are denoted by Cq'*'^ and C['^^ , and 
the propagator operator on Ti.'""' ®H^"' by S^'^\ Sim- 
ilarly, the perturbed coin operator is denoted by C'^'^K 
With this mapping, the procedure described above can 
be applied very efficiently since the "good" initial state 
IV'o'^^) is prescribed by the construction. Consequently, 
a single execution of the n' dimensional SKW quantum 
walk is sufficient to find the marked vertex with a proba- 
bility close to unity. Note that the extension to n' = n+1 
dimensions changes the optimal number of iterations, 
which amounts to an increase of the query complexity 
by a factor of \/2. 
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FIG. 2: Extension of the search in n = 3 dimensions to a hy- 
percube in n' = 4 dimensions without distinguishing even and 
odd parity vertices. The operator X denotes the application 
of the Pauh ax operation to the last qubit. The effect of op- 
erator X is switching between the image and the anti-image 
of a vertex. 



Thus, the coin states \d) with d < n become the coin 
states of a quantum random-walk on the original n di- 
mensional hypercube, while the state \n) corresponds to 
a coin state instructing the walker to remain at the same 
vertex at the next iteration. 

The propagator can cquivalcntly be understood as de- 
scribing a quantum random- walk on a regular graph con- 
sisting of an n dimensional hypercube having a self loop 
edge attached to each of its vertices. The final version 
of the quantum walk for optimal search can therefore be 
expressed by the alternating sequence of the unitary op- 
erators 

U" = SC"'^+\ (30) 
U = SCi'^\ (31) 

acting on an = 2" dimensional vertex space, and an 
n + 1 dimensional coin space. 



The query complexity can be reduced by noting that 
at every second iteration, the coin operator (7*^+^ could 
effectively be replaced by the unperturbed coin operator 
Cq'^\ thus the number of oracle queries can be reduced 
by 1/2. Moreover, as shown in Appendix IB| by forcing 
the coin operator to be Cq^-* for every second iteration, 
the equality 

^ 1 (X -I- 1) ([/(+) c/"W)n^^'') 

(26) 

holds, where X denotes the quantum NOT gate, ax, act- 
ing on the last qubit. Thus, an initial state of uniform 
superposition ^ can be used, yielding the image {x[g) 
and the anti- image (x^g © 1) of the target vertex with a 
total probability close to one. Therefore, by performing 
a measurement that ignores the last qubit we obtain the 
marked vertex xtg with probability 1 — 0(l/n'). 

Using the formula ^ to calculate the query complex- 
ity, we find that the modified algorithm completes using 
if = {tt/4:)^/N oracle queries which is identical to what is 
needed by the Grover search algorithm, and known to be 
the best achievable on a quantum computer for a success 
probability of one [lB| . 

The storage complexity of the improved algorithm can 
be reduced by noting that the auxiliary qubit can be 
eliminated using the identities 

[X, = [X, [/"(+)] = 0, (27) 

^iV-o) = l^o). (28) 

Clearly, the reduction affects only the dimensionality of 
the position space, and leaves the coin space n' = n + 1 
dimensional. With some algebra, we obtain the reduced 
propagator from S*^"*"^ as 

5 = ^ [Y^ \d,x®ed){d,x\ + \n,x){n,x\ \ . (29) 

X \d=0 / 



IV. APPLICATIONS TO FINDING MULTIPLE 
MARKED VERTICES 

In the present section we consider the optimization 
problem when the number of marked vertices is more 
than one. Although the SKW algorithm is guaranteed to 
work only when the oracle marks a single vertex, numer- 
ical calculations suggest that it can also be used to find 
multiple marked vertices as long as the number of marked 
vertices is small compared to the size of the search space. 

To answer the question whether the SKW algorithm 
can be used to find multiple marked vertices is beyond the 
scope of the present paper. Instead, here we focus on the 
question of applicability of the improvement described in 
Sec. mil In the following, we shall show that the mod- 
ified algorithm can be applied directly to the search for 
multiple marked vertices when the SKW algorithm on 
the extended hypercube yields sufficient results. To for- 
malize the task of finding multiple marked vertices, let us 
denote the number of elements marked by the oracle by 
m, and their labels by x\^ , such that j = 1, . . . , m. The 
coin operator of the SKW quantum walk can therefore 
be written as 

m 

C;, = Co ® 1 + (Ci - Co) ® I^^f X^^fl' (32) 

i=i 

and the unitary evolution operator as [/,'„ = SC'^ . This 
unitary operator is then iterated a given number of times 
to obtain a final state that is composed mainly of the 
states corresponding to the marked vertices. 

For simplicity, here we consider the variant of the im- 
provement using the walk on the extended n' = n+1 di- 
mensional hypercube using the even parity initial state. 
This is sufficient, since it is equivalent to those what we 
obtain by using the quantum walk with two coins, and 
after the reduction back to the n dimensional hypercube. 
Clearly, by defining the n' dimensional extension Cm^^ 
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of we arrive at the unitary evolution operator [/,«"''■' 
which also obeys 

|^(«=)(2r)) = C/:^+)^'-|4^)) - (C/i+)C/:(+^)n4^^ (33) 

since all the marked vertices are mapped to the even 
subspace. For the same reason, we have for every d, the 
relation 

l(d,4f = 2|(rf,f(f |c/;i+)2n^o)P, (34) 

according to the definition (fTTjl . Therefore, if the total 
probability of finding any of the marked vertices in the 
final state of the extended SKW algorithm is close to 
1/2, the modified algorithm yields them with probability 
close to unity. 



V. CONCLUSIONS 

We have proposed two alternative approaches for im- 
proving the SKW quantum random-walk search algo- 
rithm. Both improvements are centered around increas- 
ing the success probability after one run. In the first part 
of the paper we shown that the next neighbours of the 
target can be obtained with high probability, and that 
this can be exploited to reduce the number of repetitions 
or independent oracle queries to one or two. We note, 
that for certain implementations, a lower repetition count 
may have a serious impact on efficiency. In the second 
part of the paper we have developed a two-coin quantum 
random-walk search algorithm on a hypercube with self- 
loop edges. We have pointed out that the speedup over 
the original SKW algorithm in terms of oracle queries 
is I/V2. This makes the algorithm equivalent to the 
Grover search in terms of query complexity, therefore, 
present an optimal solution to the search problem if the 
success probability of 1 is required p^ . 

We have also considered the optimization problem of 
finding multiple marked vertices. Wc have shown that if 
the SKW quantum walk mapped to to an n -I- 1 dimen- 
sional hypercube yields the marked vertices with prob- 
ability close to 1/2, the algorithm in IIIII can be applied 
unmodified, resulting in the same improvement as for the 
case of a single marked vertex. 
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APPENDIX A 



Using the notation of Eq. (|T5)l . let us consider an arbi- 
trary (q^zTo ^'^ *-* definition). In one itera- 
tion, is first transformed to some /?^o ^^^^ P^Ta 
the coin operator C". Upon inspecting the definition of 
\R, 0) wc find that due to the unitarity of the coin C we 



t-i 12 



P*-^ and Pl-^j' = 0. Consider- 



have (I 

ing the action of S we obtain a*j^ ^ — /^^g . Therefore, we 



can write P* = ^ j^t^ j2 > |^t_ ^^| 

Pq^^, which proves Eq. (|16ap . The second inequality can 
be proven along similar lines. Due to the unitarity of the 
coins we always have |/3jj.iP + 1/3^ = \a 



and according to the definition of S, a^g = /3i 1 also 
holds. Therefore, we can now write Pn^^ 



< + = Pi, which provides Eq. p6bll . 

From Eqs. ([14]) follows that P^^ = Px""^^ if x is even, 
and that P]f = P^^^^ if x is odd. Combining these 
equalities with Eqs. ()16p we obtain 



pt pt 

^1 — 



(Al) 



for every positive integer t. Eq. p9|) is a special case of 
Eq. (IXTI) . 



APPENDIX B 

First note that C'^+^Po = (C^+^(g)l)Po holds, therefore 
we have 

[/'(+)2-|^(-)) = (C/(+)[/'(+))-|4^)), (Bl) 

since Eqs. (fTU]) hold for hypercubes in all dimensions. 
Moreover, we can write 



by introducing 



{+) 



C"( + )Pe = C"(+)Pe, 



a + (c(+)-c(+')®Kg)(^tgl 



(B2) 



512, 

(B3) 

where I2 is the identity acting on the qubit added by the 
extension. We can use the coin (|B3p to define the unitary 
evolution operator = S'^^^C'^^K By considering 

the expression that gives the final state of the walker after 
2r steps we find that it can be simplified to 



[/'(+)2'-|^,(-)) ^ (c/(+)f/"(+))n4^^) 



(B4) 



by using Eqs. (jBl[) and (jB2p . The advantage of this for- 
mulation is that the oracle O is used on the subspace 
7i^" unchanged, as it can be seen in Eq. (|B3[) . As a 
consequence, the coin operator (7"*^+^ acts on the total 
Hilbert space H'-^"' (K) H^"' as if two nodes were marked 
which differ only in their last bits. Fig. [2] illustrates the 
pair of marked vertices. Intuitively, this is compensated 
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in Eq. (|B4[) by alternating C"'^^^ with a coin that marks 
no vertices at all. 

Next, wG show that we can use the uniform superposi- 
tion initial state jV'o) as an initial state to the quantum 
walk if the iterations are carried out according to the 
right hand side of Eq. (|B4|) . Let X denote the quan- 
tum NOT gate, ax, acting on the last qubit. Clearly, we 
have X\i,'^^^) = and [X, [/(+)] = [X, [/"(+'] = 0. 

Thus we can rewrite the desired initial state ([3]) as 
IV'o) ^{X + ^)/^/2\■^|}''Q^) and see that 



holds. In the right hand side we can discover Eq. (jB4p 
which yields the state \x[^ with 1 — 0(l/n') probability, 
where x^g is the image of Xtg by the map ([25|) . This 
probability is distributed uniformly between the image 
and the anti-image © 1 due to the multiplication 

by {X + 1)/V2. 
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